arXiv: Empirical Analysis of Evasion and Poisoning Against Malware Data Drift Detection

This paper, published on arXiv in August 2026, presents an empirical analysis of how attackers can evade or poison machine learning-based drift detection systems used in malware defense. Drift detection is a common technique for identifying when incoming data differs from training data, often used to flag novel threats. The authors demonstrate that both evasion attacks, which hide malicious samples from detection, and poisoning attacks, which corrupt the detector’s training signal, are feasible against current state-of-the-art methods. This is not a regulatory mandate but a technical vulnerability disclosure with direct implications for AI safety and robustness under the EU AI Act’s high-risk classification.

The primary affected organizations are cybersecurity vendors, managed security service providers, and any enterprise deploying continuous malware detection models, particularly those operating in critical infrastructure, finance, or healthcare where AI-driven security is subject to stricter oversight. Compliance teams in these sectors must recognize that drift detection is not a guaranteed safeguard against adversarial manipulation, meaning their AI systems may fail to meet the robustness and accuracy requirements expected under Article 15 of the AI Act.

Compliance teams should immediately review their AI risk assessments to include adversarial threat modeling for drift detection components. They should request technical validation from their data science teams on whether their current detectors are susceptible to the attack vectors described, and if so, implement additional monitoring or fallback rules. Finally, they should document this vulnerability in their technical documentation and update their incident response plans to account for potential silent model degradation, ensuring they can demonstrate due diligence to regulators if an attack occurs.